Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
File:                     ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft (raw, json)
Hash identifier:          LjWa400llrSM4HjCDrVA7Usu0SQ14NQwW+Vj9NgFUOI=
Subject key identifier:   7E:49:4F:EE:1C:F8:A3:60:07:82:24:2C:95:F6:DA:87:1C:2E:BB:CB
Authority key identifier: 66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D
Certificate issuer:       /CN=F364A0C9AF/serialNumber=6641F6B660544ED1501BCC095AA07F9CB0FB5C4D
Certificate serial:       0241
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
Manifest number:          023E
Signing time:             Mon 30 Jun 2025 04:18:14 +0000
Manifest this update:     Mon 30 Jun 2025 04:18:13 +0000
Manifest next update:     Wed 02 Jul 2025 04:18:13 +0000
Files and hashes:         1: ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl (hash: 9SNlFHLrVzOFOj8t5JmoczlZz/4q9CQoEjS2MPlLCQg=)
                          2: 66456C5EA97711EE82772DA2775412E6.roa (hash: nnv2wC9302+3Jy3xrrAKkIS0rIVeajmhrACjCN0mcQM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364A0C9AF, serialNumber=6641F6B660544ED1501BCC095AA07F9CB0FB5C4D
        Validity
            Not Before: Jun 30 04:18:13 2025 GMT
            Not After : Jul  2 04:18:13 2025 GMT
        Subject: CN=68621006-c9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:76:97:71:3e:9b:c1:fb:78:a2:d2:f3:41:ee:
                    a8:15:a3:f2:11:c9:9b:1a:5c:54:f4:9f:7e:6f:af:
                    a6:8b:bd:59:51:b3:2c:9f:52:a9:bd:d7:94:b8:d5:
                    6f:30:fa:55:37:af:89:80:6e:2e:4b:ff:f0:ca:64:
                    e4:b1:96:60:00:b2:1c:65:8f:d4:33:0e:61:62:8a:
                    9d:ee:86:64:af:f1:45:0a:35:23:ac:c9:bc:47:37:
                    f0:bb:be:e7:24:e3:fd:b5:84:be:fe:44:11:3a:b7:
                    a4:7d:0c:0f:9b:47:1d:c8:db:ff:64:ca:84:c2:75:
                    1d:9d:84:a1:f2:03:bc:38:45:73:0c:e9:95:bf:68:
                    70:e0:57:cd:79:12:81:7b:be:d6:1d:e9:4b:dc:23:
                    76:bd:fc:de:77:d8:5e:77:2e:fb:ad:7d:e7:09:a6:
                    dd:1c:39:f6:b9:58:2a:f6:e8:3c:5a:59:5e:ba:50:
                    64:af:4e:7b:ae:55:f2:d2:ce:40:a8:15:90:14:03:
                    49:f5:ca:cf:0f:de:77:19:e6:e7:35:c2:04:b5:f2:
                    ce:b9:10:c4:58:71:54:6c:dd:1b:0b:d1:2d:f8:54:
                    6e:db:6a:71:af:93:6d:ec:d5:f8:b8:71:d2:b5:78:
                    d1:33:87:d9:85:7d:9b:52:80:8c:80:c5:f1:36:84:
                    03:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:49:4F:EE:1C:F8:A3:60:07:82:24:2C:95:F6:DA:87:1C:2E:BB:CB
            X509v3 Authority Key Identifier:
                keyid:66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:06:3a:95:67:74:db:ff:6b:d7:3d:f2:b1:c0:a0:30:f5:49:
         cc:90:b8:27:04:35:2d:d3:33:d2:71:15:4e:b9:c5:1c:12:b7:
         d2:ec:a9:5d:2d:59:74:c2:c5:23:6d:9e:9c:66:3b:ab:e1:81:
         93:b1:64:7a:b3:00:d5:b4:61:d5:e8:e1:62:d4:24:03:5a:e8:
         4f:53:2d:2a:59:f5:2a:d3:00:8a:5e:37:26:7d:fe:5a:35:aa:
         08:9e:71:07:f0:de:e6:2a:ae:9f:09:bd:ed:2f:e1:21:1f:fa:
         f4:f6:2c:ce:01:4d:01:ef:f8:5e:29:dc:3e:75:9c:ab:d3:2d:
         5a:38:f8:81:51:08:f0:04:15:1b:9e:2d:ed:f8:38:8f:ed:0a:
         be:1d:50:28:68:b8:08:c7:aa:74:5a:09:f2:8b:49:a1:1d:7e:
         13:e1:c8:27:35:ed:a0:37:45:f9:e8:23:41:2f:b5:12:36:6a:
         1c:d2:b5:02:d6:2b:31:fd:ac:5b:3e:0a:a0:35:7f:cd:26:c5:
         15:97:a9:a7:cb:19:60:ec:37:36:06:54:19:c7:c6:24:ef:27:
         a1:16:69:f5:30:43:63:98:e8:ba:98:78:c5:5c:f6:4a:c9:af:
         65:35:05:95:a1:02:84:e4:81:3b:4a:d3:0b:eb:e6:d6:22:7a:
         f1:0b:bd:5a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEEwQzlBRjExMC8GA1UEBRMoNjY0MUY2QjY2MDU0NEVEMTUwMUJDQzA5NUFBMDdG
OUNCMEZCNUM0RDAeFw0yNTA2MzAwNDE4MTNaFw0yNTA3MDIwNDE4MTNaMBgxFjAU
BgNVBAMTDTY4NjIxMDA2LWM5ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCldpdxPpvB+3ii0vNB7qgVo/IRyZsaXFT0n35vr6aLvVlRsyyfUqm915S4
1W8w+lU3r4mAbi5L//DKZOSxlmAAshxlj9QzDmFiip3uhmSv8UUKNSOsybxHN/C7
vuck4/21hL7+RBE6t6R9DA+bRx3I2/9kyoTCdR2dhKHyA7w4RXMM6ZW/aHDgV815
EoF7vtYd6UvcI3a9/N532F53LvutfecJpt0cOfa5WCr26DxaWV66UGSvTnuuVfLS
zkCoFZAUA0n1ys8P3ncZ5uc1wgS18s65EMRYcVRs3RsL0S34VG7banGvk23s1fi4
cdK1eNEzh9mFfZtSgIyAxfE2hANVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUfklP
7hz4o2AHgiQslfbahxwuu8swHwYDVR0jBBgwFoAUZkH2tmBUTtFQG8wJWqB/nLD7
XE0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRBMEM5L0I4OTcxNDRBQTY2QTExRUU4QTgyQ0U4Qzc3NTQxMkU2L1prSDJ0
bUJVVHRGUUc4d0pXcUJfbkxEN1hFMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1prSDJ0bUJVVHRGUUc4d0pXcUJfbkxEN1hFMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEEwQzkvQjg5NzE0NEFBNjZBMTFFRThBODJDRThDNzc1
NDEyRTYvWmtIMnRtQlVUdEZRRzh3SldxQl9uTEQ3WEUwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDJBjqVZ3Tb/2vXPfKxwKAw9UnMkLgn
BDUt0zPScRVOucUcErfS7KldLVl0wsUjbZ6cZjur4YGTsWR6swDVtGHV6OFi1CQD
WuhPUy0qWfUq0wCKXjcmff5aNaoInnEH8N7mKq6fCb3tL+EhH/r09izOAU0B7/he
Kdw+dZyr0y1aOPiBUQjwBBUbni3t+DiP7Qq+HVAoaLgIx6p0Wgnyi0mhHX4T4cgn
Ne2gN0X56CNBL7USNmoc0rUC1isx/axbPgqgNX/NJsUVl6mnyxlg7Dc2BlQZx8Yk
7yehFmn1MENjmOi6mHjFXPZKya9lNQWVoQKE5IE7StML6+bWInrxC71a
-----END CERTIFICATE-----
Generated at Mon Jun 30 09:41:46 2025 by rpki-client